Blocking update servers on my TV

[telUK]

Hi

Have an AC86u on merlin firmware.

I'm trying to block a prompt to update on my LG TV that happens every time I turn the TV on, I have read that blocking su.lge.com and snu.lge.com will stop the update prompt.

Do I just go to firewall tab and the url block list and add them here?

Thanks

 

[Adamm]

https://www.snbforums.com/threads/release-skynet-router-firewall-security-enhancements.16798/

 

[telUK]

Thank you, I was hoping I could do this simple task without the need of any other form of software.

As it stands my method of adding them to the firewall isn't working.

 

[ColinTaylor]

You could try creating a hosts.add file on the router like this:

0.0.0.0 su.lge.com
0.0.0.0 snu.lge.com

 

[telUK]

I just realised I was adding it wrong in the url list, it wants just name and then it will block everything, for example I entered lge in the url list and that worked.

My TV did not prompt for an update, but issue is its disabled almost all internet services on TV.

I don't understand why I cannot enter a specific address into the url list, in this case su.lge.com and snu.lge.com.

 

[telUK]

So can I ask why it seems not possible to add and block specific urls on the Asus, the two addresses I listed are the correct ones to block the update prompt on my TV.

 

[NGRhodes]

There is a URL filter in the Firewall, never used it myself.

 

[dave14305]

So can I ask why it seems not possible to add and block specific urls on the Asus, the two addresses I listed are the correct ones to block the update prompt on my TV.

I imagine it can’t work for https URLs, only http.

 

[telUK]

I imagine it can’t work for https URLs, only http.

I'm not sure its that, as if I enter just "lge" into the url list it blocks every service on my LG tv. This is a work around but I would rather just block the update server.

 

[ColinTaylor]

I think @dave14305 is probably correct. I'd guess that it uses http to perform the basic connectivity but uses https for the actual downloads.

 

[telUK]

I think @dave14305 is probably correct. I'd guess that it uses http to perform the basic connectivity but uses https for the actual downloads.

Ok so is this a limitation on the Asus ac86u, people with this TV have successfully blocked the prompt with these addresses and someone on another thread has an Asus router and can do it ok.

 

[ColinTaylor]

Ok so is this a limitation on the Asus ac86u, people with this TV have successfully blocked the prompt with these addresses and someone on another thread has an Asus router and can do it ok.

It's not a limitation of the Asus, it's a limitation of how http/https works. But this is all speculation at this point. If other people are successfully blocking it then we need to know how exactly they are doing it. Maybe they're using the method in post #4?

 

[telUK]

It's not a limitation of the Asus, it's a limitation of how http/https works. But this is all speculation at this point. If other people are successfully blocking it then we need to know how exactly they are doing it. Maybe they're using the method in post #4?

Cheer's, I asked someone who has done it on an Asus router so will update If I get an answer.

 

[ColinTaylor]

I had a quick Google on those addresses and in the posts I found they were doing it at the DNS level (e.g. dnsmasq or PiHole), not via the URL filter. So that would be the equivalent to post #4.